Advisories · Weakness
CWE-1241.
Every Advisory and CVE whose sources give the weakness CWE-1241, newest first.
- CVSS 6.3 Medium
Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
- j2commerce.com J2Store extension for Joomla
- CWE-1241
- CVSS 5.3 Medium
Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
- j2commerce.com J2Store extension for Joomla
- CWE-1241
- CVSS 6.3 Medium
Zimbra Collaboration: In Zimbra Collaboration (ZCS) before 10.1.17…
- Zimbra Collaboration
- CWE-1241
- CVSS 7.1 High
Insecure direct object reference in MicroRealEstate
- MicroRealEstate
- Broken access control
- CWE-1241
- CVSS 6.3 Medium
Keylime has a hardcoded attestation challenge nonce that allows replay attacks
- Authentication bypass
- CWE-329
>=7.14.0, <7.14.2 · fixed in 7.14.2
GHSA-q8w6-w55c-ccv5 · CVE-2026-6420 - CVSS 6.3 Medium
Duplicate Advisory: Keylime has a hardcoded attestation challenge nonce that allows replay attacks
- CWE-1241
>=7.14.0, <7.14.2 · fixed in 7.14.2
GHSA-wc6p-4gwj-jcr8 - CVSS 7.5 High
CoreDNS Loop Detection Denial of Service Vulnerability
- Denial of service
- CWE-337
<1.14.2 · fixed in 1.14.2
GHSA-h75p-j8xm-m278 · CVE-2026-26018 - CVSS 5.3 Medium
Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens
- popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.
- CWE-1241
- CVSS 4.0 Medium
Anti-Theft Bypass for Infotainment ECU
- Bosch Infotainment system ECU
- CWE-1241
- CVSS 9.6 CriticalCritical · CVSS 9+
Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
- pkp/pkp-lib
- CWE-1241
- CVSS 2.6 Low
PHPServerMon PRNG has Insufficient Entropy
- Weak cryptography or TLS
- CWE-331
<3.6.0 · fixed in 3.6.0
GHSA-hc4j-7mqg-cxjj · CVE-2021-4241 - CVSS 2.6 Low
Insufficient Entropy in PHPServerMon PRNG
- Weak cryptography or TLS
- CWE-331
<3.6.0 · fixed in 3.6.0
GHSA-97w9-gcc7-vr8g · CVE-2021-4240 - CVSS 8.1 High
Use of Insufficiently Random Values in yiisoft/yii2-dev
- Weak cryptography or TLS
- CWE-1241
<2.0.43 · fixed in 2.0.43
GHSA-hq3v-rg6f-6hx4 · CVE-2021-3689 - CVSS 8.1 High
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
- Weak cryptography or TLS
- CWE-1241
<2.0.43 · fixed in 2.0.43
GHSA-wwvv-x5mq-h3jj · CVE-2021-3692 - CVSS 7.5 High
An issue was discovered on the D-Link DWR-932B router.
- Weak cryptography or TLS
- CWE-335